Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
108 IOCs
Chinese Smishing Campaign | How a Large-Scale Phishing Kit Is Targeting 80+ Brands Across 20 Countries
Threat Actors
Excerpt
TL;DR We have been tracking a large-scale Chinese smishing campaign targeting multiple regions and industries with primary focus on telecom providers, toll road system, postal services and banks. The campaign relies on SMS-delivered phishing links that redirect victims to impersonation pages, designed as unpaid tolls, delivery issues, prizes or account-related actions. Victims are guided through a multi-step flow designed to harvest personally identifiable information (PII),…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →108 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 129.226.159.121 | High | Score 58/100 | First seen |
| IP | 43.165.133.137 | High | Score 58/100 | First seen |
| IP | 43.128.84.136 | High | Score 58/100 | First seen |
| IP | 43.160.206.15 | High | Score 58/100 | First seen |
| IP | 43.165.68.78 | High | Score 58/100 | First seen |
| IP | 47.253.154.26 | High | Score 58/100 | First seen |
| IP | 43.162.111.74 | High | Score 58/100 | First seen |
| IP | 47.251.0.95 | High | Score 58/100 | First seen |
| IP | 43.164.197.178 | High | Score 58/100 | First seen |
| IP | 43.160.238.161 | High | Score 58/100 | First seen |
| IP | 43.160.193.44 | High | Score 58/100 | First seen |
| IP | 47.90.249.139 | High | Score 58/100 | First seen |
| IP | 47.90.164.225 | High | Score 58/100 | First seen |
| IP | 47.90.164.222 | High | Score 58/100 | First seen |
| IP | 43.165.4.179 | High | Score 58/100 | First seen |
| IP | 185.224.129.181 | High | Score 58/100 | First seen |
| IP | 47.86.80.250 | High | Score 58/100 | First seen |
| IP | 47.253.228.218 | High | Score 58/100 | First seen |
| IP | 43.160.241.151 | High | Score 58/100 | First seen |
| IP | 47.82.235.111 | High | Score 58/100 | First seen |
| IP | 8.217.187.47 | High | Score 58/100 | First seen |
| IP | 43.134.76.73 | High | Score 58/100 | First seen |
| IP | 43.128.88.156 | High | Score 58/100 | First seen |
| IP | 43.167.236.68 | High | Score 58/100 | First seen |
| IP | 196.251.72.70 | High | Score 58/100 | First seen |
| IP | 216.173.64.137 | High | Score 58/100 | First seen |
| IP | 43.165.125.52 | High | Score 58/100 | First seen |
| IP | 49.51.38.141 | High | Score 58/100 | First seen |
| IP | 43.162.124.181 | High | Score 58/100 | First seen |
| IP | 43.162.127.254 | High | Score 58/100 | First seen |
| IP | 43.160.249.131 | High | Score 58/100 | First seen |
| IP | 47.253.213.253 | High | Score 58/100 | First seen |
| IP | 150.109.6.13 | High | Score 58/100 | First seen |
| IP | 154.82.110.218 | High | Score 58/100 | First seen |
| IP | 47.238.155.15 | High | Score 58/100 | First seen |
| IP | 38.180.242.70 | High | Score 58/100 | First seen |
| IP | 196.251.73.238 | High | Score 58/100 | First seen |
| IP | 47.90.154.132 | High | Score 58/100 | First seen |
| IP | 47.251.27.123 | High | Score 58/100 | First seen |
| IP | 43.166.168.99 | High | Score 58/100 | First seen |
| IP | 47.90.171.135 | High | Score 58/100 | First seen |
| Domain | darb.itc.gov.ae-cert.com | High | Score 58/100 | First seen |
| IP | 47.251.1.16 | High | Score 58/100 | First seen |
| IP | 43.160.242.47 | High | Score 58/100 | First seen |
| IP | 43.165.126.186 | High | Score 58/100 | First seen |
| IP | 147.189.161.32 | High | Score 58/100 | First seen |
| IP | 43.160.240.218 | High | Score 58/100 | First seen |
| IP | 8.219.239.111 | High | Score 58/100 | First seen |
| IP | 43.160.248.36 | High | Score 58/100 | First seen |
| IP | 43.160.252.215 | High | Score 58/100 | First seen |
| IP | 47.88.89.119 | High | Score 58/100 | First seen |
| IP | 47.253.81.117 | High | Score 58/100 | First seen |
| IP | 43.165.197.71 | High | Score 58/100 | First seen |
| IP | 43.160.206.90 | High | Score 58/100 | First seen |
| IP | 47.85.56.71 | High | Score 58/100 | First seen |
| IP | 43.160.234.26 | High | Score 58/100 | First seen |
| IP | 43.134.90.69 | High | Score 58/100 | First seen |
| IP | 43.165.198.94 | High | Score 58/100 | First seen |
| IP | 206.238.221.177 | High | Score 58/100 | First seen |
| IP | 43.162.108.157 | High | Score 58/100 | First seen |
| IP | 43.165.4.195 | High | Score 58/100 | First seen |
| IP | 89.213.174.93 | High | Score 58/100 | First seen |
| IP | 45.203.220.21 | High | Score 58/100 | First seen |
| IP | 8.222.243.235 | High | Score 58/100 | First seen |
| IP | 43.164.3.97 | High | Score 58/100 | First seen |
| IP | 43.164.129.208 | High | Score 58/100 | First seen |
| IP | 43.153.1.139 | High | Score 58/100 | First seen |
| IP | 43.160.244.84 | High | Score 58/100 | First seen |
| Domain | darb.itc.gov.ae-qoex.com | High | Score 58/100 | First seen |
| IP | 43.162.108.181 | High | Score 58/100 | First seen |
| IP | 47.89.252.221 | High | Score 58/100 | First seen |
| IP | 43.165.61.250 | High | Score 58/100 | First seen |
| IP | 43.156.47.224 | High | Score 58/100 | First seen |
| IP | 43.153.214.244 | High | Score 58/100 | First seen |
| IP | 43.160.199.147 | High | Score 58/100 | First seen |
| IP | 47.86.58.26 | High | Score 58/100 | First seen |
| IP | 47.253.254.114 | High | Score 58/100 | First seen |
| IP | 43.134.114.194 | High | Score 58/100 | First seen |
| IP | 43.160.252.12 | High | Score 58/100 | First seen |
| IP | 43.157.83.74 | High | Score 58/100 | First seen |
| IP | 43.156.234.103 | High | Score 58/100 | First seen |
| IP | 47.253.108.13 | High | Score 58/100 | First seen |
| IP | 43.160.195.64 | High | Score 58/100 | First seen |
| IP | 43.160.233.85 | High | Score 58/100 | First seen |
| IP | 43.134.179.112 | High | Score 58/100 | First seen |
| IP | 43.160.194.44 | High | Score 58/100 | First seen |
| IP | 43.134.112.30 | High | Score 58/100 | First seen |
| IP | 43.160.208.59 | High | Score 58/100 | First seen |
| IP | 43.165.197.228 | High | Score 58/100 | First seen |
| IP | 43.165.63.110 | High | Score 58/100 | First seen |
| IP | 137.220.221.138 | High | Score 58/100 | First seen |
| IP | 43.160.247.29 | High | Score 58/100 | First seen |
| IP | 43.165.62.180 | High | Score 58/100 | First seen |
| IP | 43.165.5.23 | High | Score 58/100 | First seen |
| IP | 43.160.202.101 | High | Score 58/100 | First seen |
| Domain | darb.itc.gov.ae-docs.com | High | Score 58/100 | First seen |
| IP | 156.235.89.39 | High | Score 58/100 | First seen |
| IP | 43.160.246.56 | High | Score 58/100 | First seen |
| IP | 43.160.247.80 | High | Score 58/100 | First seen |
| Domain | darb.itc.gov.ae-spot.com | High | Score 58/100 | First seen |
| Domain | darb.itc.gov.ae-area.com | High | Score 58/100 | First seen |
| IP | 43.162.102.191 | High | Score 58/100 | First seen |
| IP | 43.162.123.72 | High | Score 58/100 | First seen |
| IP | 47.253.254.189 | High | Score 58/100 | First seen |
| IP | 43.159.48.211 | High | Score 58/100 | First seen |
| IP | 47.252.25.174 | High | Score 58/100 | First seen |
| IP | 43.159.39.19 | High | Score 58/100 | First seen |
| IP | 43.165.195.9 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…